Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4cc25a8c-7e11-32ac-8977-90df30c23bd9.roa
File: 4cc25a8c-7e11-32ac-8977-90df30c23bd9.roa (raw, json)
Hash identifier: 7B2TRtQLG808l4HP+MM2B8ADjwffEpBFq1eI0x0u3d8=
Subject key identifier: 06:FF:EE:AB:2C:30:80:56:CD:1B:93:00:5F:45:A3:19:0D:2C:55:5B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584053DAFA67E60C9934DB8DF080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4cc25a8c-7e11-32ac-8977-90df30c23bd9.roa
Signing time: Thu 22 Dec 2022 12:00:00 +0000
ROA not before: Thu 22 Dec 2022 12:00:00 +0000
ROA not after: Fri 27 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 40.220.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:53:da:fa:67:e6:0c:99:34:db:8d:f0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 22 12:00:00 2022 GMT
Not After : Jan 27 05:00:00 2023 GMT
Subject: CN=6f558e8b-9034-4662-89da-abd6bc981222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:51:9c:ea:d3:fd:03:d8:d6:b4:20:96:35:06:
b6:6a:1a:ee:03:4a:3c:ae:d3:a4:9b:6f:9e:f2:c1:
b0:29:8b:ed:01:91:6f:ca:91:56:1d:ff:dd:96:00:
2c:46:bb:1a:61:dc:98:ee:b3:ab:0c:2e:a0:28:ab:
65:53:00:05:b1:cb:9e:87:45:b7:d7:b0:88:2a:04:
b9:12:35:3b:9b:e5:50:34:11:2e:e3:2f:28:b6:bc:
d8:f7:a8:23:07:78:f7:b0:92:06:66:48:ae:02:81:
bd:33:33:3a:e6:21:e9:67:02:91:0a:9a:84:10:47:
03:54:a4:06:3f:00:24:22:66:0f:0f:31:2d:31:10:
f8:fa:e3:99:d2:ef:7d:e7:00:6b:7f:db:08:c2:fa:
a5:c7:88:53:70:cb:2e:ab:8f:58:6c:27:4c:35:2f:
c9:3b:52:07:eb:0b:ff:52:17:7e:97:5c:28:2d:41:
f1:61:78:46:01:12:33:da:59:3d:91:b2:7c:e5:96:
59:d9:9c:22:df:8d:f9:b3:c5:76:41:43:4f:c9:d2:
f6:a4:92:c7:ef:16:87:73:82:99:88:c6:a8:1d:27:
80:69:15:23:77:ed:03:f4:72:15:a5:8d:10:f8:a7:
68:cb:60:70:62:6d:24:2c:ab:bb:59:67:16:56:10:
8e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FF:EE:AB:2C:30:80:56:CD:1B:93:00:5F:45:A3:19:0D:2C:55:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4cc25a8c-7e11-32ac-8977-90df30c23bd9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.220.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:c9:b3:c2:6c:55:6f:80:26:8b:db:67:cf:15:02:d5:6f:af:
de:a5:51:74:98:11:e8:8d:45:d5:cd:e9:02:b0:e2:9e:9a:76:
58:9f:18:dd:fd:74:78:27:0e:09:c7:72:df:13:67:65:df:bc:
6b:d5:8f:63:5f:17:3a:73:cc:1a:74:99:6f:5b:05:82:4e:1c:
64:5d:88:df:42:a7:f4:c1:c5:cf:c2:fa:2b:2b:1b:5d:ac:81:
03:44:d3:9e:2c:77:5e:4e:aa:7c:f2:92:d1:24:65:c6:1d:5c:
9f:28:45:53:07:50:08:88:cc:30:88:88:fd:e3:48:a8:65:57:
24:4c:ae:e4:a5:7b:a9:28:96:f0:5b:7a:e6:57:16:49:fa:70:
32:29:76:03:64:e3:5d:76:97:b5:f1:6d:f5:50:7b:a5:38:29:
19:1d:5a:95:52:2a:51:76:81:b0:07:0d:2a:de:71:43:c9:fc:
e6:1c:8d:f4:f2:f0:fb:40:95:33:8c:01:00:d6:96:31:08:44:
02:db:e0:8e:63:ac:80:cd:47:09:b8:e1:83:bd:0a:74:65:88:
3a:27:61:b9:e3:17:e9:57:ed:ae:eb:0c:1d:8a:9a:40:9d:e3:
ed:39:5b:9c:1c:76:5b:be:19:b7:fb:6e:5f:c7:9f:27:9c:d6:
70:e9:f8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:12:35 2025 by rpki-client